Helmut Schneider
unread,Jul 19, 2018, 11:17:45 AM7/19/18Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to puppet...@googlegroups.com
Hi,
---
profiles:
vpn:
openvpn:
defaults:
client:
dev: 'tun'
proto: 'udp'
resolv-retry: 'infinite'
nobind:
user: 'nobody'
group: 'nogroup'
persist-key:
persist-tun:
ca: '/etc/openvpn/ca-charlieroot.de.crt'
cert: '/etc/openvpn/mail.helmut-ritter.de.crt'
key: '/etc/openvpn/mail.helmut-ritter.de.key'
ns-cert-type: 'server'
# OpenVPN <= 2.3
comp-lzo: 'yes'
# OpenVPN > 2.3
# compress: 'lz4'
log-append: '/var/log/openvpn.log'
verb: '4'
script-security: '2'
up: '/etc/openvpn/update-resolv-conf'
The eep is called by
content => epp("openvpn/etc/openvpn/config.epp", { openvpnConf =>
$openvpnConf, openvpnMode => $openvpnMode, instance => $instance }),
The epp:
<%- | Hash $openvpnConf, String $openvpnMode, String $instance | -%>
<% ({
'Mode' => [
"$openvpnMode",
],
'Connection' => [
'remote',
'proto',
'dev',
'persist-tun',
'nobind',
'resolv-retry',
'compress',
'comp-lzo',
],
'Privileges' => [
'user',
'group',
'persist-key',
],
'Authentication' => [
'cert',
'key',
'ca',
'ns-cert-type',
],
'Logging' => [
'verb',
'log-append',
],
'Misc' => [
'script-security',
'plugin',
'up',
'down',
],
}).each |$category, $parameters| { -%>
### <%= $category %> ###
<%#= $openvpnConf %>
<% $parameters.each |$parameter| { -%>
<% if $parameter == 'remote' { -%>
<%= $parameter %> <%= $openvpnConf['server'] %> <%=
$openvpnConf['port'] %>
<% } elsif $openvpnConf[$parameter] { -%>
<%= $parameter %> <%= regsubst($openvpnConf[$parameter],
'__INSTANCE__', $instance) %>
<% } elsif defined($openvpnConf[$parameter]) { -%>
<%= $parameter %>
<% } -%>
<% } %>
<% } -%>
The problem: compress does not exist in the hiera but is printed in the
epp. How can I test if the key "compress" exists in the
$openvpnConf-Hash?
Thank you.